Privacy policy

Last updated 11 November 2026

Who we are

[COMPANY LEGAL NAME], [REGISTERED ADDRESS] operates ClaimPilot. For privacy questions and requests, contact [SUPPORT EMAIL].

What we collect

  • Account data: name, company, email, hashed password.
  • Billing data: plan, subscription status, invoice history. Card details are handled by Stripe; we never see or store the card number.
  • Claim content: property addresses, loss details, notes, the photos you upload and the documents generated from them.
  • Usage data: how many claims you have drafted, and technical logs needed to keep the service running and secure.

Photos and AI processing

To draft a document, the photos and notes for that claim are sent to the AI provider configured for this installation ([AI PROVIDER NAME]) and the generated text comes back. Those images are personal data about someone else's home: upload only what you need for the claim, and tell the property owner what you are using. We do not use your claim content to train our own models.

Who else sees your data

  • Hosting and database: [HOSTING PROVIDER]
  • Payments and invoicing: Stripe
  • AI drafting: [AI PROVIDER NAME]
  • Transactional email: [EMAIL PROVIDER, once configured]

We do not sell personal data. We disclose it only to those processors, or where the law requires it.

Cookies

One cookie, cp_session, keeps you signed in. It is httpOnly and same-site. There are no advertising or analytics cookies on this site.

How long we keep it

Claim content is kept while your account is active. Delete a claim and its photos and drafts are removed immediately. Close your account and we delete your claim content within [30] days, except invoice records we must keep for tax purposes.

Your choices

You can access, correct, export or delete your data from the dashboard, or by emailing [SUPPORT EMAIL]. If you are in the EU/UK you also have the right to object to processing and to complain to your data protection authority.

Security

Passwords are hashed with scrypt, sessions are opaque tokens in httpOnly cookies, and photos are served only to the account that uploaded them. No system is perfect; if you find a problem, email [SECURITY EMAIL] instead of posting it publicly.

Changes

If this policy changes in a material way we will email account holders before the change takes effect.